Sub-processors
Version 1.0 · Last updated: October 29, 2026
To run Outvoy, Optionality Partners, S.L. uses the providers below. Those in the first table process Customer Data (the personal data in your workspace) as our sub-processors under the Data Processing Agreement. Each is bound by a written contract with data protection obligations no less protective than ours.
Sub-processors of Customer Data
| Provider | Purpose | Data | Location |
|---|---|---|---|
| {{HOSTING_PROVIDER}} | Hosting of the console, API, background engine, PostgreSQL database, Redis queue and the website | All workspace data: leads, lists, campaigns, conversations, events, webhook logs, audit log; account data | {{HOSTING_LOCATION}} |
| Unipile SAS | LinkedIn connectivity: the hosted sign-in page, keeping the LinkedIn session and carrying out searches, profile visits, likes, invitations and messages | LinkedIn session of each connected account; profiles searched and visited; invitation notes and messages sent and received; connections | France (EU) |
| Brevo (Sendinblue SAS) | Transactional email (for example, LinkedIn reconnection notices) | Recipient name and email address; email content, which can name a connected LinkedIn account | France (EU) |
| Crisp IM SAS | Support chat in the console and on the website | Chat messages and anything you choose to share in them; your name and email if you give them; browser and device metadata | France (EU) |
| Axiom, Inc. | Application logs and performance traces, used to run and debug the service | Request paths and parameters (secrets redacted), identifiers, error details and database query traces, which can contain fragments of workspace data | United States |
Transfers outside the European Economic Area are covered by the European Commission's Standard Contractual Clauses or, where the provider is certified, the EU–US Data Privacy Framework (and the UK Extension for UK data).
Other providers and independent controllers
These parties don't process Customer Data on our behalf. They process our own account and billing data, or they act on their own account under their own terms.
| Party | Role | Data | Location |
|---|---|---|---|
| Stripe Payments Europe, Ltd. | Monthly subscriptions: checkout, card payments, invoices, the billing portal and fraud prevention | Billing contact email, card and payment details (entered on Stripe's pages, never seen by us), workspace id and plan | Ireland (EU), with processing in the United States |
| AppSumo (Sumo Group, Inc.) | Sale of lifetime licences. AppSumo is an independent controller of your purchase; we receive only the licence key, its tier and status | Licence key, tier, status and licence events | United States |
| LinkedIn (LinkedIn Ireland Unlimited Company / LinkedIn Corporation) | The platform where the actions you configure take place. LinkedIn is an independent controller under its own terms and privacy policy | Whatever LinkedIn's platform receives when your connected account visits, likes, invites or messages someone | Ireland (EU) / United States |
How we announce changes
- We update this page and email the owners of every workspace at least 30 days before a new sub-processor starts processing Customer Data, or before an existing one processes it for a new purpose or in a new country.
- You can object on reasonable data protection grounds within those 30 days by writing to {{CONTACT_EMAIL}}. We will try to address the objection (for example, by not using that provider for your workspace). If we can't, you may terminate the affected service and, for a subscription, get a refund of any prepaid fees for the period after termination.
- In an emergency (for example, a provider failing in a way that puts the service or its security at risk) we may replace a sub-processor at shorter notice and will tell you as soon as possible.
Change log
| Date | Change |
|---|---|
| October 29, 2026 | First published list. |